$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3d347070-1498-3d26-91c0-f340811f3c22.roa File: 3d347070-1498-3d26-91c0-f340811f3c22.roa (raw, json) Hash identifier: ttYvw4tKQICB4nJXCLPlDJg72OdMQ0QzfnUK3Q+HAE4= Subject key identifier: 97:13:09:E0:FC:38:C1:8A:61:96:01:05:AF:47:B2:74:DA:98:EE:B1 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584B6F4475072DE31F47D22245C0 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3d347070-1498-3d26-91c0-f340811f3c22.roa Signing time: Mon 06 Oct 2025 19:00:22 +0000 ROA not before: Mon 06 Oct 2025 19:00:22 +0000 ROA not after: Sun 04 Jan 2026 20:00:22 +0000 asID: 17275 IP address blocks: 161.107.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:44:75:07:2d:e3:1f:47:d2:22:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Oct 6 19:00:22 2025 GMT Not After : Jan 4 20:00:22 2026 GMT Subject: CN=8423df85-f042-461e-82e6-8d4a12d3cbe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:66:8b:d8:34:ac:31:e2:9e:9d:4f:07:0a:7b: f4:b6:99:76:bb:82:4b:5a:db:61:2e:1b:c2:a9:5e: dc:ad:cd:7e:b0:6e:3a:fd:59:f5:a4:0d:d8:63:6b: af:50:a9:71:cf:58:ef:11:a5:e0:a6:4d:fa:bd:70: e2:a7:09:89:0d:54:99:9e:c5:5f:7c:a4:cb:34:fc: f1:29:2e:1c:1e:7e:4a:4b:85:fb:f1:ba:3c:af:5a: 6a:eb:79:9b:cb:2b:72:aa:c2:87:2a:86:d9:2a:a3: 96:e9:36:f1:7e:ba:92:19:2f:60:df:bc:1d:4d:ed: 45:c7:0c:5f:56:b4:9d:a2:1d:55:5f:f3:e0:3e:f5: 6d:cc:59:ee:7e:4e:b2:8b:88:59:af:e8:e1:d2:22: 1a:19:d2:e4:bd:c8:ee:2f:ba:c5:21:d8:e2:1d:1d: 78:b1:40:11:96:c5:9d:ed:ed:ed:c9:f7:25:bb:fa: c9:36:84:6c:23:75:d4:1d:52:10:ba:8e:d7:3b:d1: 4f:30:b2:2e:a6:b0:ab:af:2c:dc:02:50:aa:b5:c9: 23:62:0a:32:e3:47:da:33:b9:be:9e:b8:c7:f2:79: b9:dd:a1:bb:5b:27:7d:24:48:25:22:e4:a5:38:a9: c1:04:35:9e:57:ce:93:22:a3:77:b4:d9:58:be:79: 50:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:13:09:E0:FC:38:C1:8A:61:96:01:05:AF:47:B2:74:DA:98:EE:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3d347070-1498-3d26-91c0-f340811f3c22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:75:66:a0:57:0b:20:02:de:1e:c6:b3:86:67:8f:9e:4a:f6: df:4c:a5:74:02:36:0d:80:94:10:33:2b:81:b6:6f:b9:dd:de: a0:7f:19:fa:ca:c2:a8:b0:24:0f:f9:75:2a:d5:ec:a1:4c:87: dd:35:30:d4:0b:e1:f0:7b:4e:c4:09:9a:b2:3b:6e:d9:5c:79: 56:bb:b5:18:f9:42:af:75:3a:d6:a0:7c:8a:60:e3:b6:a1:fe: e1:fb:79:f1:fd:d3:fd:47:92:0e:86:de:75:95:7d:bb:a0:40: c1:98:bd:c8:23:c6:b4:80:b8:88:82:ad:73:5a:35:68:d4:a6: 9e:14:e8:f1:28:11:b1:7b:54:bc:8b:9b:e5:42:77:69:69:1d: 79:35:19:1c:74:f3:bc:c6:17:35:ca:17:4e:c7:76:c7:bf:64: 01:87:00:d7:a8:ec:f0:09:96:e9:58:c3:56:6d:ca:3a:8b:e4: 7f:be:fb:12:d8:6b:75:7c:2e:e1:fd:ce:99:96:21:ef:35:9f: d3:60:b7:59:c5:ba:4b:c8:2c:78:4a:82:32:63:88:db:3e:cd: 4b:b9:be:97:93:b2:09:e3:31:ab:1b:67:fb:13:61:ab:e9:e1: e9:6b:9f:85:10:6d:41:40:6d:37:09:25:99:06:3f:6e:b6:55: 76:b6:8c:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtvRHUHLeMfR9IiRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTAwNjE5MDAyMloXDTI2MDEwNDIwMDAyMlowLzEtMCsGA1UEAxMk ODQyM2RmODUtZjA0Mi00NjFlLTgyZTYtOGQ0YTEyZDNjYmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGaL2DSsMeKenU8HCnv0tpl2u4JLWtthLhvC qV7crc1+sG46/Vn1pA3YY2uvUKlxz1jvEaXgpk36vXDipwmJDVSZnsVffKTLNPzx KS4cHn5KS4X78bo8r1pq63mbyytyqsKHKobZKqOW6TbxfrqSGS9g37wdTe1Fxwxf VrSdoh1VX/PgPvVtzFnufk6yi4hZr+jh0iIaGdLkvcjuL7rFIdjiHR14sUARlsWd 7e3tyfclu/rJNoRsI3XUHVIQuo7XO9FPMLIuprCrryzcAlCqtckjYgoy40faM7m+ nrjH8nm53aG7Wyd9JEglIuSlOKnBBDWeV86TIqN3tNlYvnlQHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcTCeD8OMGKYZYBBa9HsnTamO6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvM2QzNDcwNzAtMTQ5OC0z ZDI2LTkxYzAtZjM0MDgxMWYzYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoWt0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ1ZqBXCyAC3h7Gs4Znj55K9t9MpXQCNg2AlBAzK4G2b7nd3qB/GfrK wqiwJA/5dSrV7KFMh901MNQL4fB7TsQJmrI7btlceVa7tRj5Qq91OtagfIpg47ah /uH7efH90/1Hkg6G3nWVfbugQMGYvcgjxrSAuIiCrXNaNWjUpp4U6PEoEbF7VLyL m+VCd2lpHXk1GRx087zGFzXKF07Hdse/ZAGHANeo7PAJlulYw1ZtyjqL5H+++xLY a3V8LuH9zpmWIe81n9Ngt1nFukvILHhKgjJjiNs+zUu5vpeTsgnjMasbZ/sTYavp 4elrn4UQbUFAbTcJJZkGP262VXa2jOg= -----END CERTIFICATE-----Generated at Wed Oct 8 23:04:01 2025 by rpki-client